Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b5b30e6-63e2-4bfe-9e0b-d043ab10277b.roa
File:                     9b5b30e6-63e2-4bfe-9e0b-d043ab10277b.roa (raw, json)
Hash identifier:          JwDYQ+op60aSsUoWa74g2tzkLG+3IcvIdlg+9WrFMms=
Subject key identifier:   AB:B7:D3:A0:3C:D0:DC:4B:11:02:C6:08:84:7A:9A:B7:00:79:53:40
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       10578531EDE67080A42F1DF78DEE62EE305ADF63
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b5b30e6-63e2-4bfe-9e0b-d043ab10277b.roa
Signing time:             Wed 14 May 2025 00:42:11 +0000
ROA not before:           Wed 14 May 2025 00:42:11 +0000
ROA not after:            Wed 18 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:7000::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 19:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:57:85:31:ed:e6:70:80:a4:2f:1d:f7:8d:ee:62:ee:30:5a:df:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 14 00:42:11 2025 GMT
            Not After : Jun 18 23:59:59 2025 GMT
        Subject: serialNumber=3480fa3fb002405eb7016ced0397c3aeff1775bd78c4bbd147c0acc7d9ecf895, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:ed:8a:0f:b6:18:a0:3e:fc:1b:ac:f9:13:
                    7a:a3:07:d2:76:14:4b:13:1d:8e:95:ab:05:1c:c3:
                    06:d1:6a:81:13:e9:52:0f:b5:52:2f:f3:29:a5:49:
                    61:54:86:d9:ac:e4:7e:1e:dc:94:fc:4d:6c:f2:f6:
                    19:7e:38:b0:46:82:e4:eb:31:6e:fc:bf:eb:a3:53:
                    85:fb:c1:71:65:aa:c6:80:13:d0:9b:f2:c6:ca:c9:
                    af:9c:88:24:24:be:0a:66:9c:8b:ec:8d:98:32:a9:
                    69:7b:39:73:8d:bf:6f:41:2a:0a:41:c2:de:e4:cf:
                    5c:f5:0a:95:4a:12:bb:4d:7f:d5:f1:89:72:39:9a:
                    4e:ba:c8:55:23:38:84:42:ad:4d:3e:13:a8:1a:a7:
                    6c:73:fc:b7:0e:8d:fd:84:2f:a1:a9:50:ba:f0:f7:
                    14:cf:df:f2:58:97:2c:0a:bb:24:5b:aa:64:f2:36:
                    be:d4:ae:4d:30:96:49:62:66:ea:ec:fd:ae:c1:88:
                    b5:57:eb:b5:b3:33:88:23:9f:e8:09:0d:51:34:28:
                    bb:9e:14:b4:40:1f:7d:93:24:7a:a2:df:d1:18:d7:
                    cc:e3:a3:61:45:32:08:5e:c8:08:2e:9c:1e:e6:58:
                    06:23:a9:99:40:27:96:06:36:87:b7:d3:b2:9b:23:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B7:D3:A0:3C:D0:DC:4B:11:02:C6:08:84:7A:9A:B7:00:79:53:40
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b5b30e6-63e2-4bfe-9e0b-d043ab10277b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:08:3e:f7:ce:6d:a2:54:f8:c7:28:ef:ef:b7:3f:e3:d9:
         25:fa:04:c0:c2:28:dc:77:63:63:9c:f8:4d:f3:90:c4:ec:cb:
         19:c5:40:98:94:a3:83:04:29:58:43:b0:80:9d:1a:01:13:b4:
         ff:1f:83:b2:1f:50:f6:38:0d:b2:37:82:95:18:a6:dc:95:27:
         9d:52:eb:77:0f:fc:18:f6:60:1c:1c:86:6a:84:6c:6b:d8:a7:
         b9:c4:fa:6f:23:ea:60:4a:ea:20:99:73:6d:88:33:fd:74:85:
         91:9e:eb:87:09:21:6f:72:ad:b1:f8:9d:21:e6:57:81:9a:99:
         c8:0f:33:a9:d8:27:f8:92:b8:83:9c:e4:ec:31:49:8a:4e:47:
         15:50:69:c3:93:3f:d7:dd:14:cf:0e:5e:50:2f:f4:15:80:1a:
         37:86:1b:02:d5:c8:4a:1c:7a:1b:32:c8:3c:fc:07:c6:9f:35:
         32:22:b5:46:0a:58:c4:6a:3a:86:43:45:21:3d:b0:02:73:61:
         f7:91:dd:98:69:6c:40:66:13:98:36:98:99:27:89:6d:3d:90:
         a1:f3:ac:f2:45:47:9e:66:ac:ab:53:8f:a7:c3:96:8c:2a:dc:
         97:01:3a:48:5e:ec:b9:17:7a:27:3d:d9:9c:3c:08:55:c4:9c:
         1c:9a:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----